Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: Ic8ioBpu6ox33vzrkmqHofBqrmGGvzk1hX5dYCulIHA=
Subject key identifier: E4:4A:C7:57:74:52:9D:9C:4D:AD:81:8F:CF:2D:CC:FA:9D:D0:82:54
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 0196BA11325A62E527CB1AC4F223CCBDB0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0B4D
Signing time: Sat 10 May 2025 12:00:11 +0000
Manifest this update: Sat 10 May 2025 12:00:11 +0000
Manifest next update: Sun 11 May 2025 12:00:11 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: 55m59Hm9E6AfutqZjqZz45ayf5ZWWiO4HqD3425Ow2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:32:5a:62:e5:27:cb:1a:c4:f2:23:cc:bd:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: May 10 12:00:11 2025 GMT
Not After : May 11 12:00:11 2025 GMT
Subject: CN=e44ac75774529d9c4dad818fcf2dccfa9dd08254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:2d:c6:2d:f5:90:8a:33:cf:75:fa:a3:ba:
33:82:46:3f:98:ed:70:4d:09:76:0e:44:40:3e:4e:
93:83:8a:d8:5f:9b:47:a5:eb:95:11:f4:5f:f3:31:
cb:2b:fb:37:a0:10:08:d2:22:14:e9:81:39:cc:b4:
ab:14:36:be:e6:75:01:37:e9:55:07:d5:a5:8c:7a:
40:40:04:88:0e:f5:a2:2f:73:e4:fe:f2:aa:fe:42:
a8:9f:b9:21:39:ed:57:79:79:c9:c5:97:77:fd:07:
63:35:1b:c9:54:74:f2:86:24:9c:e0:8c:ef:8c:83:
ba:64:7b:7d:6a:6b:bd:a7:4f:4d:f1:17:84:90:d3:
cc:d3:17:fe:32:3a:83:27:67:19:4f:8d:4b:66:18:
4f:ba:5b:ef:4c:32:71:15:b5:0a:2d:44:6b:07:83:
f7:a8:b1:2a:1d:35:72:c4:aa:8b:4f:9e:95:67:95:
0e:f3:97:49:7d:4d:14:da:96:06:35:0e:ab:7c:f6:
7b:55:82:a2:40:13:14:81:40:24:1d:92:1c:de:6b:
a8:f5:62:e0:72:b9:d8:fa:c2:ba:d7:68:9d:a9:29:
10:21:cf:75:91:55:cc:3c:b7:4c:e8:5c:97:b9:29:
bb:0b:8d:3c:ce:f8:44:c7:78:51:1f:a4:9b:f5:74:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:C7:57:74:52:9D:9C:4D:AD:81:8F:CF:2D:CC:FA:9D:D0:82:54
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:e8:76:fe:f9:52:95:22:7b:0c:90:e7:71:3c:e0:28:36:
93:2d:5c:de:77:49:8f:f1:76:0b:21:47:c1:65:d1:ec:ad:de:
fe:d2:18:dd:db:87:b1:6c:4a:0d:e6:0b:9c:75:33:30:5a:15:
de:ab:40:48:d9:5f:aa:ba:ae:21:b1:2e:95:f2:95:79:25:fa:
0d:cf:22:75:78:a7:09:2e:a7:4c:a9:63:8c:58:bf:09:52:63:
e6:55:bb:66:21:29:3d:c8:c3:ee:26:01:71:ac:ab:1b:17:a0:
f2:ca:96:83:80:75:d2:f4:fe:2b:f1:da:30:39:99:14:e4:35:
0b:3b:b9:96:f5:15:51:71:03:f6:0f:b5:6c:14:b4:89:83:fe:
5f:5f:3f:0f:64:49:d3:7d:6b:4d:11:3e:ce:5a:d7:79:2a:17:
e2:4f:80:75:3b:80:57:4f:6c:d0:3a:1c:20:a4:43:38:bb:16:
b7:ca:4c:77:ed:2d:c7:d6:3f:b6:36:25:cd:9e:e2:a5:a0:c9:
d2:61:2a:af:93:6d:59:dc:a0:62:18:a8:ee:76:8d:fc:07:bc:
da:b1:cc:68:c0:1b:85:63:95:bd:6d:d7:9f:7a:80:32:96:6f:
e3:3a:c0:42:4e:dc:32:6a:00:da:c0:c5:b2:aa:90:72:35:0b:
0d:5a:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:38:07 2025 by rpki-client